llms.txt

# DevCenter

Canonical repository: https://github.com/dev-bricks/DevCenter
Ecosystem: dev-bricks
Umbrella: open-bricks
Version: 1.0.3
Last-checked: 2026-09-16

DevCenter is a local-first, zero-egress Python desktop IDE and developer toolkit from dev-bricks under the open-bricks umbrella. It combines a PySide6 code editor, static AST analysis, automated encoding repair (ftfy), PyInstaller build helpers, icon conversion, third-party license collection, SQLite full-text file indexing, backup-oriented sync helpers, and an optional Claude/Anthropic AI assistant in a standalone desktop suite.

## Audience

- Python desktop and CLI developers targeting Windows 10/11, Linux, or macOS.
- Maintainers requiring fast local AST analysis, packaging, and license collection in one GUI.
- AI agents and LLMs needing structured project metadata and redacted status exports without whole-repo egress.
- Security-conscious engineers in offline or air-gapped environments requiring audited zero-egress tools.

Positioning:
- Not Azure DevCenter, Microsoft Dev Box, Moderne DevCenter, or Devbox.
- Not a hosted cloud service; the PySide6 desktop app is authoritative.
- The former Web/PWA companion is removed; no hosted server or external importer ships.

Privacy and Safety:
- Operates 100% offline by default; zero telemetry, zero analytics, zero background pingbacks.
- External AI assistance (Claude) is strictly opt-in; prompt text is dispatched only on explicit user action.
- API keys are encrypted via the native system keyring (Windows Credential Manager); never stored in plain text.
- Redacted workspace export (`devcenter-workspace-v1.json`) strips secrets, API keys, and private file paths.
- Unprivileged user-space execution (`RunAsInvoker`); no administrator elevation or drivers required.

## Governance & Runtime Invariants

1. `INV-LOCAL-01` (Zero-Egress Default): 100% offline operation by default; zero background telemetry.
2. `INV-OPTIN-02` (Opt-In AI Boundary): Claude/Anthropic API calls execute only upon explicit user prompt dispatch.
3. `INV-KEYRING-03` (Keyring Secret Vault): API credentials stored in native OS credential stores; zero plaintext on disk.
4. `INV-EXPORT-04` (Redacted Workspace Export): Sanitized metadata export contract strips secrets and personal paths.
5. `INV-STATIC-05` (Inert AST Inspection): Static code analysis parses AST tokens inertly without executing user code.
6. `INV-SECURITY-06` (Vulnerability Floors): Enforces patched runtime dependency floors (Pillow >=12.3.0, keyring >=25.0.0, pytest >=9.1.1).
7. `INV-PERM-07` (100% Permissive / Separation): GPLv3 suite with dynamic LGPL Qt linking and PyInstaller Bootloader Exception.
8. `INV-USER-08` (Unprivileged RunAsInvoker): Runs purely in standard user space without requiring administrator elevation.
9. `INV-MULTI-09` (Multi-Host Sync Discipline): Adheres to Plan D repository hygiene; .gitignore blocks sync conflict files and locks.
10. `INV-SLA-10` (48h / 5d Security SLA): Dedicated security disclosure channels with 48h initial response and 5-day triage commitment.

## Important Files

- `README.md`: English overview, 15-point quick navigation, architecture diagrams, invariants, and ecosystem matrix.
- `README_de.md`: German overview with 100% mutual anchor and feature parity.
- `SECURITY.md`: Bilingual security policy detailing zero-egress invariants, keyring isolation, and 48h/5d SLA.
- `PRIVACY_POLICY.md`: Privacy scope for local settings, indexes, build artifacts, and optional API usage.
- `THIRD_PARTY_LICENSES.md`: Comprehensive Software Bill of Materials (SBOM) covering all 20 packages with SPDX tags.
- `THIRD_PARTY_LICENSES.txt`: Machine-readable license mapping and dependency floor audit.
- `MARKETING-LOG.txt`: Local marketing intelligence register, 4 target personas, and 5-way competitive matrix.
- `EXPORTFORMAT.md`: Implemented redacted desktop-export specification (`devcenter-workspace-v1`).
- `DOCUMENTATION_STATUS.md`: Source hierarchy and historical boundary documentation.
- `pyproject.toml`: PEP 621 package manifest, standard classifiers, dependency floors, and repository URLs.
- `.github/workflows/tests.yml`: Multi-OS CI workflow (Windows, Linux, macOS) with concurrency control and ruff gate.
- `src/core/app_paths.py`: Platform-specific path resolver for local settings and SQLite databases.
- `translator.py`: Tier-2 multi-language translation engine supporting DE, EN, ES, ZH, JA, RU with 4-stage fallback.
- `tests/test_metadata.py`: Automated contract suite for documentation anchors, badges, invariants, and metadata.
- `tests/test_security_license_contract.py`: Automated contract suite for dependency floors, licenses, and security SLA.

## Search Phrases

```
local-first Python IDE
pyside6 python desktop developer toolkit
windows python ide pyinstaller build wizard
offline python code editor ast static analyzer
python complexity analyzer and encoding repair
python third-party license collector pyinstaller
redacted workspace export python ide
dev-bricks DevCenter python development suite
open-bricks local-first developer tools
```